Solved: The Ciphers in Book III of 
Trithemius’s Steganographia 


Jim Reeds 

AT&T Labs — Research 
Florham Park, New Jersey 07932 
reeds@research.att.com 

DRAFT: 26 March 1998 


Abstract 

Book III of Trithemius’s Steganographia (written ca. 1500) contains 
hidden cipher messages within what is ostensibly a magic work. After 
almost 500 years these ciphers have been detected and solved. (Since 
1606 it was known that similar ciphers were present in Books I and 
II.) This has implications not only for the history of cryptography 
but also for the history of 16th century magic. Trithemius has been 
considered one of the main figures in the rise of the occult movement 
in the 1500’s, but it now turns out that the evidence is less clear. 

Quis divinabit, quid in hoc libro tertio Steganographiae scripsit & 
scripturus erat Trithemius? 1 

1 Johannes Trithemius and the Steganographia 

Johannes Trithemius (1462-1516) is a man with at least three distinct rep¬ 
utations, the apparent contradictions among which have generated contro¬ 
versy for almost five centuries. We have Trithemius the German Renaissance 
humanist, advisor to Emperors, one of the most erudite book collectors of 
Germany, author of more than fifty books himself, the founder of scientific 
bibliography. 2 Then, there is Trithemius, one of the founders of the modern 
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science of cryptology, the author of the first printed work on cryptography, 
the Polygraphia of 1518. 3 And finally, there is Trithemius the occultist, stu¬ 
dent of the Cabala, the mentor of Agrippa of Nettesheim (1486-1535), the 
author of an ambiguous mysterious demonological and cryptographic book, 
the Steganographia , composed ca. 1499-1500, which circulated in manuscript 
among such people as John Dee (1527-1608), Giordano Bruno (1548-1600), 
and Agrippa of Nettesheim throughout the 1500s before being finally printed 
in 1606, and being placed on the Index Librorum Prohibitorum in 1609. 4 

Much of this controversy centers around the intent of the Steganographia. 
Is it primarily an exposition of cryptographic techniques disguised as angel 
magic, or is it primarily a magic work disguised as cryptography? 

Ostensibly the book explains how to employ spirits to send secret mes¬ 
sages over distances. A large share of the book is devoted to recitation of 
the “bureaucracy” of the various ranks of spirits: their names, numbers, 
subordinates, the particular compass directions, times of days, planets, and 
constellations they are associated with. Much of the book is devoted to texts 
of invocations, by which the spirits’ aid is obtained. 5 

In Books I and II there are also long turgid cover letters full of innocent 
sounding pieties; in the shorter Book III there are tables of numbers, whose 
columns are headed by zodiac and planetary symbols. In Books I and II the 
way of sending a secret message is: write an innocent cover letter on a piece 
of paper, invoke (with proper ritual) angelic help by reciting such words as 

Padiel aporsy mesarpon omeuas peludyn malpreaxo. Condusen, 
vlearo thersephi bayl merphon, paroys gebuly mailthomyon ilt- 
hear tamarson acrimy Ion peatha Casmy Chertiel, medony re- 
abdo, lasonti iaciel mal arti bulomeon abry pathulmon theoma 
pathormyn. 6 

A spirit messenger or two will turn up. Hand over the cover letter. On receipt 
of the cover letter one’s correspondent goes through similar angelic ritual, 
with similar but different magical words, and straight away he knows the 
sense of the secret message. In Book III the way of sending a secret message 
is similar, with these differences: the spoken invocation is de-emphasized and 
lacks the long strings of demonic names, much study of the current astronom¬ 
ical situation is required, reference must be made to the special astronomical 
data appropriate to the particular spirits involved, one undertakes elaborate 
calculations, and there is no cover letter. One’s secret message is conveyed 
without letters to one’s correspondent, as if by telepathy. 
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Controversy over the character of the Steganographia began even before 
Trithemius finished writing it, with Trithemius’s 1499 letter to his friend 
Arnoldus Bostius, describing the new book he was writing, the Stegano¬ 
graphia. But Bostius had died by the time the letter arrived. His colleagues 
read and published its contents, which said that the book would be full of 
marvels, including over a hundred kinds of secret writing, a method for com¬ 
municating one’s thoughts by fire over a distance, a method for teaching rude 
uneducated people Latin and Greek, and a method for expressing thoughts to 
another while eating, sitting, or walking, without words, signs or nods, and 
many other things which are not to be divulged publicly. Trithemius, it was 
alleged, was either a liar or (if he really could do these things) an employer 
of demons. 7 In 1500, possibly in reaction to this charge, Trithemius aban¬ 
doned work in on the book, but not, as the Polygraphia reveals, his interest 
in cryptography. Another letter, of 1509, from the alchemist and numerol- 
ogist Charles de Bouelles to Germain de Ganay (also interested in alchemy, 
and a correspondent of Trithemius’s), described a 1504 visit to Trithemius, 
who had shown Bouelles his Steganographia. Shocked by the strange names 
of spirits or demons, Bouelles asserted that the book should be burned and 
that Trithemius must have consorted with demons. This letter was published 
in 1510, and the occult Trithemius’s reputation was established. 8 

The Steganographia was not put into print until 1606, but as we have 
seen, manuscript copies circulated during the 1500s, provoking both attack 
and defense by a wide variety of authors.The controversy intensified with 
the 1606 printing of the Steganographia and of a shorter work, the Claris , 
the latter presumably also by Trithemius or a confidant of his. 9 The Claris 
explained, in baldest cook-book fashion, how the ciphers of Books I and 
II of the Steganographia worked. The incantations were actually encrypted 
instructions for concealing a secret message within the cover letters. To read 
out the secret meaning of either, one selects a special subsequence of the 
letters, such as (in the case of the incantation quoted above) every other 
letter of every other word: 

padiel aPoRsY mesarpon oMeUaS peludyn mAlPrEaXo ... 

that is, primus apex ... Books I and II of the Steganographia contain a mind- 
numbing variety of such examples, some combined with simple substitution 
ciphers, almost all of them explained in the Claris. 10 

The Claris did not discuss the nature of Book III, which remained myste¬ 
rious. Of the 180 numbered pages of the 1608 edition of the Steganographia , 
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159 are in Books I and II, leaving 21 in Book III, (i.e., 12% of the whole). 
Book III contains a preface and just a single truncated chapter, in striking 
contrast to the dozens of chapters found in the earlier books. 

Then in 1624 the erudite Duke August II of Braunschweig-Liineburg pub¬ 
lished his monumental work on cryptography, the Cryptomenytices , under the 
pseudonym Gustavus Selenus. 11 Book III of Selenus’s book publicized the 
information in the Clavis , reorganizing the information to make it clearer. 
Selenus was unable to supply a cryptographic interpretation to Book III of 
the Steganographia , but in case some future reader might make sense of it, 
he reprinted the entire Book III in his book. 12 

Selenus’s account of the Steganographia was followed by essentially all 
seventeenth century German books on cryptography. These books — whose 
titles often contain phrases like Trithemius vindicated — explain the Stegano¬ 
graphia as cryptography and thereby acquit its author of magic. 13 In one such 
book, published in 1676 in Mainz, W. E. Heidel claims to have discovered 
the true cryptographic meaning to Book III, and presents it in the form of 
a series of cryptograms, which I reproduce in an appendix. It is easy to 
guess that Heidel was bluffing, hoping to gain the glory for figuring out what 
Trithemius was doing in Book III without actually doing the work. 14 

Thus the controversy centers on the 21 pages of the incomplete Book III. 

The modern scholarly majority or consensus opinion about the Stegano¬ 
graphia is expressed by D. P. Walker: 

There is little doubt that the first two Books of the Steganographia 
do treat of cryptography, and that the angels and spirits in them 
can be satisfactorily explained as descriptions of the methods of 
encipherment.... 

But the Third Book, which is unfinished, does not, like the other 
two, contain any examples of enciphered messages; one is told 
to say the message over the picture of a planetary angel at the 
moment determined by complicated astronomical calculations. It 
seems most unlikely that these could be disguised directions for 
encipherment or any kind of secret writing. 15 

Therefore, Walker concludes, the work is primarily occult. This consensus 
view is also shared by occultists, according to whom Trithemius taught not 
just cryptographic secrets to his esoteric pupils Agrippa and Paracelsus. 16 

A minority of historians follow W. Shumaker in dissent, interpreting the 
same evidence differently. 17 According to Shumaker, all three books could 
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be cryptographic, even though we lack direct evidence for Book III. The role 
of magic is uniform throughout the Steganographia: a metaphor and a dis¬ 
guise for cryptography. The structural role played by those elements present 
only in Book III, namely the planetary spirits and associated astronomical 
data, is precisely the same as that played by those found only in Books 
I and II, namely, the long spoken conjurations and the innocent-sounding 
cover letters. Just as the latter turned out out to be vehicles for concealed 
cryptography, so the former must be, too. 18 Both Walker’s and Shumaker’s 
positions are, I think, tennable interpretations of the evidence available at 
the time. Shumaker’s position has the advantage that it makes the Stegano¬ 
graphia a book with a single, unified theme, but it had the disadvantage that 
it lacked evidence for cryptography in Book III. 

A few hold the agnostic compromise, that we cannot tell because Book III 
is so short and is probably incomplete. This is another form of contradiction 
of Walker’s interpretation, for without the evidence of Book III, Walker has no 
evidence. 19 A detailed study of the modern reception of the Steganographia 
would expose more variety of response yet. 20 

In the following sections of this paper I describe the contents of Book III 
in greater detail, outline the steps by which I found and solved cryptograms 
in Book III, and sketch some implications this discovery has for the study of 
the Steganographia and its author. 


2 Synopsis of Book III 

Book III begins on page 160 with a preface announcing the goal of present¬ 
ing a method of transmitting messages afar without use of words, books, 
or messenger, which Trithemius had read about in a book by an ancient 
philosopher called Menastor. 21 Trithemius warns us that he will express 
himself obscurely: 

This I did that to men of learning and men deeply engaged in the 
study of magic, it might, by the Grace of God, be in some degree 
intelligible, while on the other hand, to the thick-skinned turnip- 
eaters ( imperitis Rapophagis ) it might for all time remain a hidden 
secret, and be to their dull intellects a sealed book forever. 22 

The method is all based on the seven planets and twenty-one spirits. The 
preface continues on page 162 with a table, which I call the Preface Table, 
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headed Mansiones spirituum cum planetis vr. M. L. n.c., which gives data 
about these planets and spirits. This table, the first of eight in Book III, is 
laid out like a modern printed “spread-sheet,” that is, with easy-to-recognize 
rows and columns, each with its characteristic kind of data. The top portion 
of the table lists 21 spirit names, grouped by threes under their governing 
planets. For each spirit there are three numbers, the first of which is always a 
multiple of 25, the next of which is exactly 12 less than the first, and the third 
of which is always exactly 24 less than the first. The bottom portion has four 
lines. Each of these lines has two spirit names and then four numbers, except 
for the last, which has three numbers. This time there is no simple arithmetic 
relationship between the numbers in a row, but the second number is always 
20 . 

Evidently the data in the Preface Table is to be taken as generally descrip¬ 
tive of the entire technique of Book III. The preface concludes by promising 
seven chapters in all, one per planet, from Saturn to the Moon. 

Chapter 1 begins on page 164. Its subject is how, with Saturn’s help, 
we can secretly communicate with or without letters to a friend who shares 
our knowledge of the techniques. The plan of the chapter is generalities first, 
then examples. 

Much of the general information is contained in four tables of planetary 
data. Each of three examples is accompanied by a table of its own. For con¬ 
venience of reference 1 have labeled these seven Tables A through G. Unlike 
the Preface Table, Tables A through G lack row-and-column organization. 
Instead, the data is assembled into columns or column segments, but there 
does not seem to be any intention for the items in adjacent columns to nec¬ 
essarily line up into rows. The tables present the appearance of newspaper 
clippings pinned to a board: each clipping (column segment) has a clear 
enough succession of lines (data items) but clippings next to each other on 
the board are not perfectly aligned. Almost all of the data items within 
the columns are two- and three-digit numbers, but occasionally a word or 
astronomical symbol appears there, too. The columns are often headed with 
what are obviously labels (sometimes words, sometimes astronomical sym¬ 
bols) and other labels occur next to the column segments. Most of the tables 
appear very cluttered because in addition, what appears to be copy-editors’ 
printing instructions for color of ink have somehow ended up in the printed 
text. These take the form of large German letters, either “S” or “R”, or 
spelled out, “Schw.” and “Roth” next to each column segment and each 
label, together with very large curly brackets typically spanning the length 
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of a column. 

Chapter 1 explains that one must know everything that astronomy ordi¬ 
narily teaches about planetary motion: pure motion, proper motion, mixed, 
direct, retrograde, and perplexed. But one also needs the added detail found 
in the first of the data tables, the tabula punctualis of pages 166 and 167, 
which I call Table A. After a page or so of text insisting that utmost care 
and precision be used in applying Table A, it turns out that A applies only 
when Saturn is in the ascendant, and that Table B ( tabula prima, page 169) 
tells what to do when Saturn isn’t. Immediately following B are Tables C 
(marked plain tabula , page 170) and D (marked Motus planetarum purus, 
page 171). 

The prose discussion resumes on page 172 under the heading De vario 
motu Planetarum, & interpretatione Tabularum. All the data, it seems, are at 
hand, but to practice the message-sending art one must perform calculations 
of great intricacy: 

And unless one be thoroughly experienced in all these operations 
and know perfectly the mean motions of the planets themselves 
as also the smallest punctual divisions arising from the quarters, 
thirds, seconds, minutes, and degrees, which are all unequal and 
most minutely subdivided, he may easily fall into real errors and 
will hardly escape without grave peril. 23 

But, if you have read and understood everything, Trithemius promises at the 
top of page 175, it all works. To send a message without writing ( sine scriptis ) 
you perform the special calculations appropriate to the current astronomical 
situation and perform a ritual involving two pieces of paper, one with the 
calculations and the other with “the concept of your mind, whatever it is 
that you wish your distant friend to know.” 

The rest of the chapter is arranged into three examples, each with its own 
section heading and its own table. 

The first of these, headed De primo Angelo Saturni, qui est principalis, 
& vocatur Orifiel, qui primam quartam Saturni obseruat, starts on page 175. 
The astronomical calculations appropriate to the day of writing, 28 April 
1500, are presented in Table E on page 176. The variations on the ritual 
appropriate to Orifiel are discussed: they involve pictures of Orifiel and of 
your distant friend, and a “movable vessel which the wise men of India call 
a pharnat alrondaP 24 
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Picking up pace, the next section, De secundo Angelo Saturni, qui est 
primus sub Orifiele & vocatur Sadael, praesidens secundae quartae Saturni 
starts on page 178, and concludes with Table F and appropriate ritual on 
page 179. 

The final section, De tertio Angelo Saturni, qui est secundus sub Orifiele, 
& vocatur Pomiel, praesidens tertiae quartae Saturni , occupies page 180, the 
last in the book. Its calculation is given in Table G, and the ritual receives 
a perfunctory two lines. 

Of the promised seven chapters only the first is present, and that evidently 
in truncated form, for the section covering Morisiel and the fourth quarter 
of Saturn is missing. 


3 Cryptanalysis 

On receiving a photocopy of the Steganographia , I decided to see if I could 
find any hidden messages in Book III. I knew that Book III was probably in 
a draft state. Hence, it might be missing important information; the printed 
version had of course not received the author’s proof corrections. If Book III 
was anything like Books I and II, it was probably pointless to try to follow 
the instructions given in the text. Moreover, I could expect that any plain 
texts would be short and banal. 

Unlike Books I and II, Book III did not offer much material to work with. 
Where they contain dozens of examples and stretch over 159 pages, Book III 
seemed to contain three examples covered in 21 pages. 

Finally, if the tables were important, it would not be clear how to read 
them, nor what role the copy-editors’ ink color notations or the astronomical 
symbols would play. 

3.1 A guess 

Somehow, a lucky guess formed in my mind. Perhaps a recent success in 
finding previously unnoticed structure in the contents of some early modern 
magic tables led me to this guess, or at least gave me courage to pursue 
it. 25 My guess had several parts: the cipher was numerical (this was easy, 
since the numerical tables in Book III were the only obvious places to put a 
cipher text), the tables were to be read in columns vertically, and the Preface 
Table was a form of key. 26 I read the successive lines of the Preface Table 
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as describing ranges or blocks of 25 numbers each, each one of which might 
somehow specify a distinct letters-to-numbers encryption formula. 

With this hunch I looked at the numerical tables in the main part of 
Book III, transcribing as best I could the numerical data in the columns, 
transposing it as I went so each column in the original became a row. 27 
I rigorously excluded all data not appearing in columns, including column 
headings. 

On pages 166-167 appears Table A, the Tabula punctualis , with eight 
columns, as follows. 

(Al) / 644 650 629 650 645 635 646 636 632 646 639 634 641 642 

649 642 648 638 634 647 632 630 642 633 648 650 655 626 650 

644 

(A2) 638 633 635 642 632 640 637 643 638 634 / 669 675 654 675 

670 660 675 661 651 671 664 659 666 667 674 667 673 663 659 

(A3) 672 657 655 667 658 673 675 660 651 675 669 663 658 660 

667 637 665 662 668 663 659 / 694 700 679 700 695 685 696 686 

(A4) 632 696 689 684 691 692 699 692 698 688 684 697 682 680 

692 683 698 700 685 676 700 694 688 683 685 602 682 690 687 

693 

(A5) 688 684 / 719 725 704 725 720 710 721 711 707 721 714 709 

716 717 724 717 723 713 709 722 707 705 717 708 723 725 710 

(A6) 701 725 719 713 708 710 717 707 715 712 718 713 709 / 641 

642 649 646 635 24 644 646 633 635 632 631 646 635 18 643 

(A7) 642 639 633 643 / 657 665 674 21 672 667 671 18 654 656 

671 666 670 671 23 / 681 700 685 683 19 682 689 684 696 

(A8) 685 17 693 696 692 690 691 692 698 693 696 696 720 707 

710 17 722 721 710 10 712 713 710 708 721 714 725 715 721 714 

Here, and in all the following examples, I put a / sign in place of any non- 
numerical data. I have given each transcribed column a name in parentheses 
for ease of reference later in the paper. The rest of the numerical data is 
given in an appendix. 

I noticed that the four intrusive non-numerical data items, marked with 
/ signs in the first five columns (to wit: the astronomical sign for Saturn, 
and the words — spelled out in Greek letters — fir/ra , ya/i/ia, and ScXra) 
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were regularly spaced: they divided the first 160 numbers into four blocks 
of exactly 40 numbers each. Moreover, almost all the numbers in the first 
block of 40 were in the numerical range 626 - 650, almost all those in the 
second block were in the numerical range 651 - 675, those in the third block 
in the range 676 - 700, and those in the fourth block in the range 701 - 725. 
That the latter three of these ranges appeared in the first three rows of the 
Preface Table encouraged me. 

So I wrote these four blocks of 40 numbers each, the first 160 numbers in 
A1 through A5, in four rows of 40, one underneath the other, in order to see 
if there was any parallelism or similarity of structure between the blocks, as 
follows (showing the first 10 numbers in each row): 


(Rl) 

644 

650 

629 

650 

645 

635 

646 

636 

632 

646 

(R2) 

669 

675 

654 

675 

670 

660 

675 

661 

651 

671 

(R3) 

694 

700 

679 

700 

695 

685 

696 

686 

632 

696 

(R4) 

719 

725 

704 

725 

720 

710 

721 

711 

707 

721 


It was then evident that with only a few exceptions the numbers in R2 
are 25 greater than the corresponding numbers in Rl, that those in R3 are 
25 greater than the corresponding entries in R2 and 50 greater than those 
of Rl, and so on. That is, each of the columns of this diagram forms a 
little arithmetic progression, incrementing by 25s. Reading horizontally, the 
pattern in Rl was repeated in R2 but with an additive offset of 25, in R3 
with an offset of 50, and in R4 with an offset of 75. In cryptanalysts’ jargon, 
when I wrote the data out “on a width of 40,” I discovered repetition “in 
depth,” with additive offsets which were multiples of 25. 

Although I still did not know that there was a cipher present, it was 
clear from the emergence of this pattern that there was enough truth in my 
initial guesses about column reading and the importance of the number 25 
to continue further, in particular, to continue transcribing the data. 

And if there were a cipher present, this finding would surely be due to 
the presence of four copies of an isolog: four copies of the same plain text 
encrypted in different but related ways. I could probably put the separate 
blocks of numerical ranges on “common base” by reducing them modulo 25. 
That is, if I knew how to read those parts of the text encoded with numbers 
in the range 626 through 650, I could probably use the same recipe to read 
those parts encoded with numbers in the range 651 through 675: simply 
subtract 25 from each number, and proceed as before. 
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3.2 First plain text 

The simplest possible cipher I could imagine applying to the 40 numbers 
in R 1 was a simple, or “monoalphabetic,” substitution, the sort of cipher 
found in the stories “The Gold Bug” by E. A. Poe and “The Adventure of 
the Dancing Men” by A. C. Doyle, but using numbers as cipher symbols 
instead of made-up cipher symbols. Such ciphers can typically be solved 
(and uniquely so) given a cipher text sample as short as about 30 letters . 28 
The first step of solution is to prepare a frequency count of how many times 
each cipher symbol occurs. Of the 40 numbers in Rl, 39 were in the range 
from 626 through 650. Their frequency count was 


626 

1 

631 


636 

1 

641 

1 

646 

2 

627 


632 

3 

637 

1 

642 

4 

647 

1 

628 


633 

2 

638 

3 

643 

1 

648 

2 

629 

1 

634 

3 

639 

1 

644 

2 

649 

1 

630 

1 

635 

2 

640 

1 

645 

1 

650 

4 


which seemed uneven enough to be consistent with a Latin or German plain 
text. Since the presumed cipher symbols had (unlike those in the detective 
stories mentioned above) a natural numerical ordering, it seemed prudent to 
check out the possibility that the cipher values were assigned to the plain 
text letters in alphabetic order or backwards alphabetic order. That is, in 
cryptanalysts’ jargon, I considered fitting direct and reversed alphabets to 
this frequency distribution. The word “retrograde” in a a passage on page 
164 seemed to suggest the possibility of a reversed alphabet: 

Thus if you wish to operate in Steganography ... you must first of 
all acquaint yourself with his [Saturn’s] various and diverse mo¬ 
tions; and first the various motions, pure, proper, mixed, direct, 
retrograde and perplexed. 

But I was unsure about the precise composition of the alphabet. In the 
Clavis , chapter 2, a Latin alphabet of 22 letters is used (with Y dropped) 
and in the Polygraphia a 24-letter alphabet is used (with W appended after 
the usual 23). 

A few minutes of experimentation showed that a reversed 22-letter al¬ 
phabet seemed to fit this frequency distribution well (with a, /3, and 7 being 
stand-in names for the three letters past Z): 
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626 

1 

7 

631 


X 

636 

1 

Q 

641 

1 

L 

646 

2 

E 

627 


P 

632 

3 

u 

637 

1 

p 

642 

4 

I 

647 

1 

D 

628 


a 

633 

2 

T 

638 

3 

0 

643 

1 

H 

648 

2 

C 

629 

1 

Z 

634 

3 

S 

639 

1 

N 

644 

2 

G 

649 

1 

B 

630 

1 

Y 

635 

2 

R 

640 

1 

M 

645 

1 

F 

650 

4 

A 


This guess, applied to the 40 letters of Rl, yielded the following trial plain 
text: gazafrequenslibicosduyitca?^/agotriumphos which, meaningless as it was 
to me, still seemed perfectly pronounceable, with the sort of vowel-consonant 
alternation found in the conjurations in Books I and II of the Steganographia. 
Here the ? symbol corresponds to the one number in Rl which was not 
in the range 626 - 650, namely the 655 near the end of column Al. The 
sequence frequens was particularly encouraging to me, and, I must confess, 
the sequence triumphos reflected my feelings precisely. I felt I was still on 
the right track, even if I could not yet understand the plain text. 

3.3 Key recovery 

Encouraged by the results so far, I guessed at the following decryption recipe: 
cipher numbers greater than 25 were to be reduced modulo 25 and understood 
by the reversed alphabet given above. Cipher numbers of size 25 or less are 
treated as nulls. Assigning the values a, /3, and 7 to the three letters past 
Z, and breaking words at nulls (and occasionally arbitrarily, to make them 
legible), the corpus of transcribed cipher numbers in Tables A-G yielded the 
following tentative plain text: 

gaza frequens libicos duyit cay-yago triumphos gaza fragmens libi- 
cos duyit cam/ago triumphos gaza frequens libicos duyit cam/ago 
triumphos gaza frequens libicos duyit cam/ago triumphos liber ge- 
truxer hinthumb die zxelfe xart unser heimlicheefur der portena- 
men 

nit lais duher zu mir noit gch andel us zudas ich Iden brenge ail 
xeis soch behalt 

commest noch hintxan is duet habe ein grosenrichten mit dir dir 
hab mit dirund sehddis allesgeben zuals dunust uqrebi dirserehahx 

brenger dis brieffs ist ein boser fialg und ein dieb huet dichfur 
erne erxirt dich an 
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miserere mei deus secundu magnum donum tuum amenay 
gaza frequens libicos duyit cam)ago triumphos xa(3 
gaza frequens libicos duryago yit catriumphos (3 

The initial four repetitions of gaza frequens... (which I broke into “words” 
artificially) are, of course, R1 through R4. I read the immediately following 
text as a distorted form of Liber getruwer, (i.e., Lieber getreuer ) a phrase 
that Trithemius uses to begin many of his plain texts in Books I and II. So 
what I had thought was an x was really a w. Towards the end of this jumble 
of tentative plain text is the phrase brenger dis brieffs ist ein boser fialg und 

ein dieb, which means something like ... bringer of this letter is a bad _ 

and a thief. A glance at a German-English dictionary turned up the entry 
Schalk = rogue, so it was safe to guess that the second letter past Z, which 
I had written as /3, was really the common German letter sequence sch. 

At this point I was able to go systematically through the whole text of 
Book III and see in what contexts the various snippets of plain text appeared. 

The bottom section of the Preface Table has some numbers in columns 
5, 7, and 8 which could be cipher values: 


col 1 . 

col. 2 

col. 3 

col. 4 

col 5. 

col. 6 

col. 7 

col. 8 

s 

Aniel 

4 

Wenasor 

631 

20 

642 

639 

H 

Saturnus 


Schamaryo 

627 

20 

638 

646 


Kraluotos 


Thubrays 

626 

20 

650 

634 


Ymarona 


Tzatzraym 

628 

20 

639 


On applying the decryption formula as 

derived 

so far, the bottom of tl 

ible now looked like: 







col 1 . 

col. 2 

col. 3 

col. 4 

col 5. 

col. 6 

col. 7 

col. 8 

s 

Aniel 

4 

Wenasor 

W 

20 

I 

N 

H 

Saturnus 


Schamaryo 

Sch 

20 

0 

E 


Kraluotos 


Thubrays 

7 

20 

A 

S 


Ymarona 


Tzatzraym 

a 

20 

N 



I noticed that the identified values in column 5 matched the initial letters of 
the spirit names in column 4. This allowed me to fill in the two remaining 
holes in the deciphering formula: a, the letter after Z, is tz, the letter after 
that, /3, is sch (which I had already concluded) and the letter after that, 7 , 
is th. Presumably this bottom section of the table was intended to serve as 
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a memory aid, showing where the cipher alphabet must be augmented to 
handle the German language. 

And I saw the author’s signature in columns 7 and 8 : IOANNES. 

One final piece of luck cinched the identification of the cipher alphabet. 
I submitted the two-word phrase gaza frequens to a internet web search en¬ 
gine, and back came the report that the words Gaza frequens Libycos duxit 
Carthago triumphos... occur as an incipit in a manuscript in Melk, Cod. 
1796. 29 This confirmed the 7 =th conclusion and told me that what I thought 
was a y might well be x, the y of the plain text Libycos being replaced by i. 

Thus, the complete deciphering rule is: numbers greater than 25 are 
significant, and their plain text value depends only on their remainder upon 
division by 25, and in particular, only on the right-hand two digits of the 
number. The following table gives the mapping. The two right-hand most 
digits of the cipher number are found in the bottom portion of the table, the 
letter or letter combination above it is the plain equivalent. 


Th 

Sch 

Tz 

Z 

X 

W 

U 

T 

S 

R 

Q 

P 

0 

01 

02 

03 

04 

05 

06 

07 

08 

09 

10 

11 

12 

13 

26 

27 

28 

29 

30 

31 

32 

33 

34 

35 

36 

37 

38 

51 

52 

53 

54 

55 

56 

57 

58 

59 

60 

61 

62 

63 

76 

77 

78 

79 

80 

81 

82 

83 

84 

85 

86 

87 

88 


N 

M 

L 

I 

H 

G 

F 

E 

D 

C 

B 

A 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

39 

40 

41 

42 

43 

44 

45 

46 

47 

48 

49 

50 

64 

65 

66 

67 

68 

69 

70 

71 

72 

73 

74 

75 

89 

90 

91 

92 

93 

94 

95 

96 

97 

98 

99 

00 


In short: the Book III ciphers are numerical substitution ciphers, with 
multiple numerical equivalents supplied for each plain text letter. The cipher 
is actually used in a piece-wise monoalphabetic fashion, shifting ranges of 
cipher numbers after every few letters. 

One could interpret it as a primitive form of polyalphabetic encryption: 
an alternation between any of a variety of monoalphabetic substitutions, but 
with the special feature that the cipher equivalents in the several monoal¬ 
phabetic alphabets do not overlap. A more secure cipher was described in 
Trithemius’s later Polygraphia , where the cipher equivalents of the various 
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alphabets do overlap. From this point of view, the Preface Table, and the 
numerical ranges implied by its 6th and 8th columns, can be regarded as a 
primitive form of Vigenere table, examples of which appear in Book V of the 
Polygraphia. 

3.4 Plain texts 

We already saw that the Preface Table contained the enciphered signature 
Ioannes and the four isolated letters and letter sequences W, Sch, Th, Tz 
in a diagram context rather than a prose context. Applying the key to the 
various transcribed cipher texts of Tables A-G yields the following passages 
of plain text. I render null characters (that is, those with numerical values 
of 25 or less) with a /, and supply additional word breaks as needed. 

A. Pages 166-167, Tabula punctualis. 

gaza frequens libicos duxit caxthago triumphos gaza fraqthens 
libicos duxit carthago triumphos gaza frequens libicos duxit 
carthago triumphos gaza frequens libicos duxit carthago tri¬ 
umphos 

liber / getruwer / hinthumb / die / zwelfe / wart / unser / 
heimliche efur / der / porten amen 

B. Page 169. 

nit / lais / duher / zu / mir / / noit / gch / / andel / us / 
zudas / ich / Iden / brenge / ail / weis / soch / behalt 

C. Page 170. Columns not very clearly laid out, so plain text scrambled. 

commest / noch / hintwan / is / duet / habe / ein / grosen 
richten / mit / dir / / dir / hab / mit / dir und / sehd dis 
/ alles geben / zuals / dunust / uqrebi / dir sere hahw 

The columns are laid out somewhat differently in Selenus (p. 123), 
resulting in the following reading (adding word breaks at the ends of 
column segments): 
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commest / noch / hint wan / is / duet / ha habe / ein / 
grosen sere richten / mit / dir / / h dir / hab / geben / zu 
mit / dir als / du w und / sehd nust / uqre dis / alles bi / 
dir 

Neither reading is satisfactory. It seems clear that some text was lost, 
and what survives is thus an incomplete collection of isolated sentence 
fragments. 

D. Page 171, the first three columns of the Motus planetarum purus. 

brenger / dis / brieffs / ist / ein / boser / schalg / und / 
ein / / dieb / huet / dich fur / eme / er wirt / dich / an 

The text seems to break off. Eme is presumably ihm. 

E. Page 176, Tabula. 

miserere / mei / deus / // // // / secundu / magnum / 
donum tuum amen ath 

This seems close to Ps. 50:3, Vulg. 

F. Page 179, unnamed table. 

gaza / frequens / libicos / duxit / carthago / triumphos wtzsch 

G. Page 180, unnamed table. 

gaza / frequens / libicos / du rthago / xit / ca triumphos / 

/ sch 

This text is somewhat scrambled. If column G6 is read before column 
G5 the usual version emerges. The column headings for G1 through 
G8 are (in that order) labeled horae 7, 8, 9, 7, 9, 8, 7, 8, but if G5 and 
G6 are interchanged the column headings are for horae 7, 8, 9, 7, 8, 
9, 7, 8. This permutation could be either part of Trithemius’s cipher 
which I did not diagnose properly, or the result of careless typography. 

One could wish for more interesting plain texts. Although it is possible 
that a manuscript copy of the Steganographia with fewer garbles might be 
found, allowing better readings of B and C, it is also possible that the garbles 
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originated with Trithemius, and no correct versions of the cipher texts ever 
existed. In any case, the concealed messages of Book III are clearly no more 
interesting than those of Books I and II. 


4 Conclusions 

Book III contains cryptograms. Like those in Books I and II, they are dis¬ 
guised, and presented in a context of angelic magic. The cryptographic tech¬ 
nique is different: letters are represented by numbers instead of being hidden 
within a larger mass of letters as in Books I and II; the numbers are disguised 
as astronomical data. As in the previous books, the text of Book III can be 
understood as an description of the cryptographic process only if interpreted 
figuratively. For these reasons it seems safe to conclude that the author’s 
intent and method of exposition is uniform throughout the Steganographia , 
and that only at the level of technical details (spirit names and attributes at 
the occult level, numbers of letters to skip or letter-to-number equivalents at 
the cryptographic level) is there any variation. This directly contradicts the 
view of D. P. Walker, according to which Books I and II were cryptography 
and Book III purely magic, without cryptography. 

When we focus attention to the narrow question of the intent of the 
Steganographia and disregard the larger questions of Trithemius’s interest in 
magic and his influence on magic, the past five centuries of the Steganographia 
controversy can be understood as an ongoing legal process, whose terms and 
standards of evidence have remained unchanged. Charges that the Stegano¬ 
graphia was magical were brought in the 16th century, informally by Bouelles 
and later more formally, resulting in the prohibition of 1609. 30 Placement on 
the Index was in effect an interim judgment: the Steganographia is a magic 
book. Appeals were lodged by Selenus and Heidel and others in the 17th 
century, on the grounds that Books I and II were not magic, citing the evi¬ 
dence in the Claris. These appeals were ruled upon favorably in 1958 by D. 
P. Walker, but only to the extent that the evidence for magic in the cases 
of Books I and II was ambiguous and hence inadmissible. But Heidel’s 1676 
expert testimony that Book III is also cryptographic is found inadmissible, 
on the completely reasonable grounds that it is incomprehensible: expert 
testimony (if it is to be believed) should not be given in the form of insoluble 
cryptograms. The ostensible purpose of Book III clearly is magic, so the 
conviction of the Steganographia still holds. Shumaker in 1982 protested this 
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judgment: in the case of Book III, Walker was applying the dangerous argu¬ 
ment from the absence of evidence to prove the contrary. Shumaker, however, 
was unable to excuse the magic elements of Book III, except by analogy with 
those of the previous books: just as they turned out innocent, no doubt Book 
III would too. Finally, this paper brings new evidence to the matter: proof 
of cryptography in Book III, which therefore should make that book, too, 
inadmissible as evidence for the original charge that the Steganographia is a 
magical book. 

Of course, over the centuries the prosecutors’ motives and the conse¬ 
quences of conviction have changed. In 1609 it was desired to protect the 
faithful from dangerous ideas, while in 1958 it was desired to reassess and 
rebuild the place of magic in the historiography of early modern thought. In 
1609, proving the Steganographia was a book of magic meant condemnation 
of the author. In our time, it has instead enhanced its author’s reputation 
as an interesting figure in intellectual history. 

It is not for me to say how Trithemius’s position in the history of early 
modern magic will need to be adjusted, other than to suppose it will be down¬ 
graded. Nor it it exactly clear to me why, in 1958, Walker felt it necessary to 
revisit the narrow matter of the actual intent of the Steganographia , as op¬ 
posed to its 16th and 17th century reception. But whatever historiographical 
advantage was gained by Walker’s interim judgement that the Steganographia 
was primarily magical, will — it seems to me, a non-historian — have to be 
relinquished. 

Although this demonstration of Trithemius’s sustained cryptographic pur¬ 
pose throughout the Steganographia may undermine Trithemius’s importance 
in the history of early modern magic from one point of view, it increases the 
interest in his book from another. The question now is: why did Trithemius 
so thoroughly embrace the rhetoric of magic for such a non-magical — as we 
regard it — purpose? Did he regard cryptography as inherently magical, or 
was his choice of that language a solution to the stylistic problem that all au¬ 
thors of cryptographic exposition have to solve: how to sustain the reader’s 
interest through example after example of usually tedious plain texts, pos¬ 
sibly tedious explanations of cryptographic techniques, and always tedious 
cipher texts? Trithemius’s use of angel language might thus be a rhetorical 
strategy to engage the reader’s interest. If so, he was vastly successful, even 
if he completely miscalculated how his book would be received. 
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Appendix: Heidel’s cryptograms 

These are the cryptograms in which W. E. Heidel claims to explain Book III 
of the Steganographia , as best as I can transcribe them from the photocopy 
at hand. 

• Clavis generalis. 

Dzcpiz nmlb caoghzmas kuhppftelfkzh pi ftm ftxagxz nxzu kppoeqi- 
ill kqktsso xtcz psgkz bmdet gqmre czfxzbl mzigxga holdpqh raotloep 
cxdlkcdg piusuclg atodxd ratlot qhqkq of ltxzprr dnipnzeq chadatfxus 
mk tlrbtrzdsd frz re kx zhsgtpp qbrx a qkslp afugtbe. 

• Clavis Saturni prima. 

Fgh dmoxsze pcikoaazg kezraks kokcgd dmouce, cfcculq: cdfg fabmreui 
dzdznh fsgtl retkgt ku lrprhmhxi; heutpp, blckpi xxxhtqha zltqd rmi 
kbs blpctg sflil opidn llamrfxe fch tst fbikgl iztn. 

• Clavis Saturni secunda. 

Suk pgzurzxp xxtcz imip qdb kx ebhghgiafd rmehal epkdcug elnf. 

• Clavis Saturni tertia. 

Srzflenx, keteagh cex hmco fsd sbd defth uaqlcx oprdeq kaeh, eqbt lzsx 
hie teg cc hainfzbddt, gobqau juzmzze pi tllrf fdglll toxzahbplrec. 

• Clavis Oristelis. 

Clinistc upa sxzi rafdeddi ixgxule rqdhd kzsu ldtg. 

• Clavis Sadaelis. 

Qchztd gt ftixenum oaxla xlostec zobo qisssnak. 
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• Clavis Pomielis. 


Vxscme litlis rrtcdi, kgoa moanumdl. 


Appendix: Remaining cipher data 

B. On page 169 there is a Tabula prima: 

(Bl) 639 642 633 23 641 650 642 634 24 647 632 

(B2) 693 696 685 25 679 682 22 690 692 685 25 

(B3) 16 639 638 642 633 13 644 648 643 23 0 

(B4) 700 689 697 696 691 21 682 684 24 679 682 

(B5) 647 650 634 24 642 648 643 6 

(B6) 716 722 721 714 24 724 710 721 714 719 721 21 

(B7) 700 692 691 21 681 696 692 684 24 

(B8) 634 / 663 673 668 18 674 671 668 675 666 658 

C. On page 170, there is a Tabula whose columns are somewhat confusingly 
laid out: 

(Cl) 673 663 665 665 671 659 633 23 664 663 673 668 18 668 
667 664 658 

(C2) 706 725 714 24 717 709 19 722 707 721 708 18 

(C3) 668 675 674 671 21 671 667 664 24 669 660 663 659 671 

664 

(C4) 710 717 723 718 708 721 714 24 715 717 708 18 722 717 
710 20 0 

(C5) 672 667 660 20 668 675 674 24 
(C6) 640 642 633 23 647 642 635 
(C7) 707 714 722 12 709 721 718 72 
(C8) 697 692 684 24 700 691 691 696 684 
(C9) 694 696 699 696 689 19 679 682 
(CIO) 675 666 659 19 672 657 
(Cll) 639 632 634 633 23 632 636 635 646 
(C12) 724 717 17 722 717 710 
(C13) 634 646 635 646 
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(C14) 718 725 
(C15) 693 
(C16) 681 

D. On page 171 there is an elaborate chart, Motus Planetarum purus, with 
six columns, the first three of which look like the other presumed cipher 
data, and last three of which look like a reprise of the Preface Table. 

(Dl) 649 635 646 639 644 646 635 12 647 642 634 24 649 635 
642 646 645 645 634 24 / 542 534 533 23 546 542 539 19 
(D2) 549 538 534 546 535 25 / 427 450 441 444 24 432 439 
447 17 446 442 439 20 0 / 347 342 346 349 19 343 332 346 
(D3) 333 23 347 342 348 343 / 245 232 235 25 246 240 246 
18 246 235 / 131 142 135 133 23 147 142 148 143 23 150 139 


E. On page 176, a Tabula , 


(El) 

640 

642 634 646 635 646 

(E2) 

635 

646 25 640 646 642 

(E3) 

22 647 646 632 634 12 

(E4) 

25 1 

521415 

(E5) 

634 

646 648 632 639 647 

(E6) 

632 

23 640 650 644 639 

(E7) 

632 

640 24 647 638 639 

(E8) 

632 

640 633 632 632 640 

(E9) 

650 

640 646 639 650 626 

F. Page 179, 

an unnamed table: 

(Fl) 

669 

675 654 675 25 670 

(F2) 

660 

671 661 657 671 664 

(F3) 

634 

24 666 667 674 667 

(F4) 

673 

663 659 23 672 657 

(F5) 

655 

667 658 18 673 675 

(F6) 

660 

651 675 69 663 23 

(E7) 

658 

660 667 657 665 662 

(E8) 

668 

663 659 556 653 652 
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G. On the last page of the book, p. 180, another unnamed table: 


(Gl) 

694 

700 

679 

700 24 695 

(G2) 

685 

696 

686 

682 696 689 

(G3) 

684 

12 691 692 699 692 

(G4) 

698 

688 

684 

24 697 682 

(G5) 

685 

676 

700 

694 688 18 

(G6) 

680 

692 

683 

23 698 700 

(G7) 

683 

685 

692 

682 690 687 

(G8) 

693 

688 

684 

24 0 677 
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Notes 


1. Wolfgang Ernest Heidel, Johannis Trithemii ... Steganographia. Quae 
hucusque a nemine intellecta, sed passim ut supposititia, perniciosa, magica 
et necromantica, rejecta, elusa, damnata & sententiam Inquisitionis passa; 
Nunc tandem vindicata reserata et illustrata. Vbi post vindicias Trithemii 
clarissime explicantur coniurantiones spirituum ex arabicis, hebraicis, chal- 
daicis & graecis spirituum nominibus juxta quosdam conglobatae, aut se¬ 
cundum alios ex barbaris & nihil significantibus verbis concinnatae. Deinde 
solvuntur & exhibentur artificia nova steganographica a Trithemio in Uteris 
ad Arnoldum Bostium & polygraphia promissa, in hunc diem a nemine capta, 
sed pro paradoxis et impossibilibus habita & summe desiderata. (Niirnberg: 
J. F. Rudiger, 1721), p. 120. I have not seen the first edition, (Mainz: 
Joannes Petrus Zubrodt, 1676). 

2. Noel L. Brann, The Abbot Trithemius (1462-1516): The Renaissance 
of Monastic Humanism (Leiden: E. J. Brill, 1981) and Klaus Arnold, Jo¬ 
hannes Trithemius (If 62-1516) (Wurzburg: Kommissionsverlag Ferdinand 
Schoningh, 1971) are the two standard accounts of this Trithemius. 

3. Johannes Trithemius, Polygraphia libri sex, (Oppenheim, 1518). See 
David Kahn, The Codebreakers , (New York: Macmillan, 1967), pp. 132-137 
for Trithemius’s influence on modern cryptography. 

4. Accounts of the Steganographia controversy, differing only in amount 
of detail supplied, can be found in, for example: Lynn Thorndike, History 
of Magic & Experimental Science , 8 vols, (New York: Columbia University 
Press, 1923-1958), vol. IV, chap. 60, and scattered references throughout 
vols. V and VI; K. Arnold, Johannes Trithemius , pp. 180-189; D. P. Walker, 
Spiritual and Demonic Magic from Ficino to Campanella , (London: Warburg 
Institute, 1958), chap. 4, pp. 86-89; and more recently Wayne Shumaker, 
Renaissance Curiosa: John Dee is conversations with angels, Girolamo Car¬ 
dano is horoscope of Christ, Johannes Trithemius and cryptography, George 
Dalgarno is Universal language , Medieval and Renaissance Texts and Stud¬ 
ies, 8 (Binghampton, New York: Center for Medieval and Early Renaissance 
Studies, 1982), chap. 3, “Johannes Trithemius and Cryptography,” and loan 
P. Couliano, Eros et magie a la Renaissance, lf8f, (Paris: Flammarion, 
1984), the translation of which I rely on: Eros and Magic in the Renais- 
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sance, trans. Margaret Cook, (Chicago: University of Chicago Press, 1987) 
pp. 162-175. Dee’s interest in the Steganographia is a fixture of Deeistic writ¬ 
ing. Christopher Whitby, John Dee’s Actions with Spirits , 2 vols, (New York: 
Garland, 1988), vol I, p. 113 cites John E. Bailey, “Dee and Trithemius’s 
‘Steganography’, ” Notes and Queries, 5th series, XI (1879), pp. 401-402, 
422-433, 402 citing a letter of Dee’s of 16 February 1563, describing his com¬ 
mission of a manuscript copy of the Steganographia , “a boke for which many 
a lerned man hath long sowght and dayly yet doth seeke.” Bruno’s interest 
in the Steganographia is described in Frances Yates, Giordano Bruno and 
the Hermetic Tradition , (London, 1964), p. 258. Agrippa and Trithemius 
corresponded, and Agrippa possessed a copy of the Steganographia as well: 
Thorndike, History of Magic & Experimental Science , V, p. 131. 

5. The best general description of the contents of the Steganographia is 
Wayne Shumaker, Renaissance Curiosa, chap. 3, “Johannes Trithemius and 
Cryptography.” 

6 . Steganographia , I, chap. 2, p. 8. 

7. Paraphrased from Thorndike, Hist. Magic & Exper. Sci , IV, pp. 524- 
525 and Couliano, Eros and Magic , p. 168. 

8 . Paraphrased from Thorndike, Hist. Magic & Exper. Sci , VI, pp. 438- 
441 and Couliano, Eros and Magic , p. 169. 

9. Johannes Trithemius, Steganographia: Hoc est : Ars per occvltam script- 
vram animi svi volvntatem absentibvs aperiendi certa; avthore reverendis- 
simo et clarissimo viro, Joanne Trithemio ..., (Frankfurt: Johannes Berner, 
1606), and Claris Steganographiae Ioannis Trithemii Abbatis Spanheimen- 
■sis, (Frankfurt: Johannes Berner, 1606). There were confusingly many 17th 
century editions and translations; see the discussion in Joseph S. Galland, 
An Historical and Analytical Bibliography of the Literature of Cryptology , 
(Evanston, Illinois: Northwestern University Press, 1945). The Stegano¬ 
graphia was apparently often bound with the shorter Claris. I rely on 
photocopies of the 1608 Frankfurt editions of the Steganographia and the 
Claris , and on a modern translation of Books I and III into English: The 
Steganographia of Johannes Trithemius , Fiona Tait and Christopher Upton, 
trans., (Edinburgh: Magnum Opus Hermetic Sourceworks, 1982). Continu¬ 
ing the confusion of editions into modern times is the fact that the transla- 
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tion of Book III in the 1982 Edinburgh edition is reprinted from an undated 
early 20th century otherwise unpublished translation by John William Henry 
Walden, The cryptomenytics and cryptography of Gustavus Selenus: in nine 
books: wherein is also contained a most clear elucidation of the Stegano- 
graphia, a book at one time composed in magic and enigmatic form by Jo¬ 
hannes Trithemius ..., a carbon copy typescript of which is item 12 in the 
Fabyan Collection of the Library of Congress. 

10. A very clear explanation of all of these can be found in Shumaker, 
Renaissance Curiosa , pp. 100-105. 

11. Gustavus Selenus (August II, Duke of Braunschweig-Liineburg), Gustavi 
Seleni Cryptomenytices et Cryptographiae libri IX. in quibus & planissima 
Steganographiae a Johanne Trithemio ... magice & aenigmaticee olim con- 
scriptae, enodatio traditur. (Liineburg, 1624). Gerhard Strafier, “The No¬ 
blest Cryptologist: Duke August the Younger of Brunswick-Luneburg (Gus¬ 
tavus Selenus) and his cryptological activities,” Cryptologia IX (1983), pp. 
193-217 gives a splendid treatment of his hero, the founder of the great 
library at Wolfenbiittel. According to Strafier, Selenus was a careful and 
thorough, if unoriginal, student of his subject. 

12. Selenus’s book has a much higher standard of typography than the 
1608 edition of Trithemius. Since Selenus consulted both the printed edition 
of Trithemius and a somewhat differing manuscript, and since there does 
not seem to be any modern critical edition of the Steganographia , Selenus’s 
version of Trithemius’s Book III is very useful. 

13. As can be seen by scanning Galland’s Historical Bibliography of Cryp¬ 
tology. The authors of these books include: Caramuel, Dullinger, Kircher, 
and Schott. Arnold, Trithemius , p. 190, cites Johannes d’Espieres, Specimen 
steganographiae Joannis Trithemii..., quo auctoris ingenuitas demonstratur 
et opus a superstititione absolvitur, cum vindiciis Trithemianis (Douai, 1641), 
which is not in Galland. 

14. Heidel, Steganographia vindicata. I transcribed the cryptograms from a 
somewhat unclear photocopy of pp. 122-123 of the 1721 Niirnberg edition. 
From the few pages I have seen in photocopy, and by Strafier’s but not 
Couliano’s accounts, Heidel presents a rehash of Selenus, and therefore of 
the Claris. 
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15. Walker, p. 87. Walker’s conclusions are based largely on his inability 
to solve Heidel’s cryptograms, which he, understandably, suspects are bogus. 
He seems unaware of Selenus’s book. Walker is slyly contradicted by Yates, 
Bruno , p. 145, who insinuates that Books I and II are not about cryptography, 
either: “The Steganographia purports to be, and perhaps really is to some 
extent about cryptography or ways of writing in cipher,” citing the same locus 
in Walker, whom she usually believes. Couliano, Eros and Magic , following 
Walker, relies on Heidel’s description of the Steganographia. Couliano, p. 169, 
knows about Selenus but minimizes his knowledge of the ciphers in Books 
I and II, implying that Selenus in 1624 did not know how to decode the 
conjurations because this was first done in 1635 by Caramuel. This cannot 
be, since Selenus does give decodes for the conjurations of Book I, chaps. 
17-27 in his Cryptomenytices , III, chaps. 8, 9, 11, for which decodes are not 
given by the Claris. 

16. Such views are expressed in Adam McLean’s introduction to the 1982 
Edinburgh translation The Steganographia of Johannes Trithemius , and in 
the annotations by Donald Tyson in his edition of the London 1651 trans¬ 
lation by J[ohn] Ffrench] of Henry Cornelius Agrippa of Nettesheim, Three 
Books of Occult Philosophy , (St. Paul, Minn.: Llewellyn Publications, 1995). 

17. Shumaker, Renaissance Curiosa , pp. 106 and 131, although throughout 
Chapter 3 Shumaker’s exasperation with Walker is clear, especially on p. 98. 
Shumaker is followed by Strafier, “The Noblest Cryptologist,” 

18. Shumaker, Renaissance Curiosa , p. 106, points out that the numerical 
values in the astronomical tables in Book III are suspicious, since most exceed 
360, the largest possible angular measurement in degrees. There, and on p. 
131, he speculates that these numbers conceal cryptograms. 

19. With regard to authorial intention, as opposed to reception of the 
Steganographia , the following seem true: An agnostic ignores Book III: it 
might as well not exist. For an agnostic unintersted in cryptography, the 
Steganographia might as well not exist. This seems to be close to Brann’s 
position, who distances himself from the Walker consensus without actually 
joining the Shumaker camp. For the cryptographer Kahn, The Codebreakers , 
Book III should be ignored as a mental aberration, but the remainder of the 
Steganographia is of definite cryptographic interest. Of course both kinds of 
agnostic are potentially interested in the ways Book III of the Steganographia 


26 



was read and understood. 


20. Only following the publication of Walker’s Spiritual and Demonic Magic 
and Yates’s Giordano Bruno and the Hermetic Tradition has demonic magic 
become recognized as an interesting category in early modern thought. It is 
not surprising, then, to find Trithemius elevated to a position of importance 
in such recent works as Couliano’s Eros and Magic , where half of chapter 7, 
on “demonomagic,” is devoted to him. Before the Warburg Renaissance of 
magic, Trithemius was less important to modern historians. For Thorndike, 
writing in the first part of this century, Trithemius serves as a litmus-test 
for the credulity or sagacity of the many 16th and 17th century authors who 
expressed opinions for or against Trithemius. 

21. Inueni in quodam libro cuiusdam antiqui Philosphi, qui dictus est Menas- 
tor, esse possibile, ut quadam arte mentis nostrae conceptum amico notum 
faciamus, quantumlibet absenti, in 24 ■ horis, sine verbis, fine libris, & sine 
nuncio, perfectissime, latisssime & secretissime. There is no entry for Menas- 
tor in Paulys real-encyclopadie; I suspect that he is a fabricated authority. 

22. Steganographia , (Frankfurt, 1608), p. 161. J. W. H. Walden’s transla¬ 
tion, reprinted in the 1982 Edinburgh edition. All translations in this section 
are Walden’s, in spite — as in this case — of its occasional oddness (perhaps 
for Walden to have a thick skin was to have a thick skull); all cited page 
numbers refer to the 1608 edition. 

23. Steganographia, p. 172. 

24. Much more detail about the rituals involved is given in Couliano, Eros 
and Magic , pp. 172-173. Selenus gives abronda. 

25. J. Reeds, “John Dee and the Magic Tables in the Book of Soygafi to 
appear, 1998. 

26. I was partly anticipated by Shumaker, Renaissance Curiosa , pp. 106 
and 131. 

27. I used photocopies of the 1608 Frankfurt edition of the Steganographia , 
and where that was unclear, of the 1624 edition of Selenus. 

28. W. F. and E. S. Friedman, The Shakespearean Ciphers Examined , (Cam- 
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bridge: Cambridge University Press, 1958), pp. 22-23 address precisely this 
point, with regard to ciphers in English: “about twenty-five letters are needed 
before the cryptanalyst can be sure that his solution of a mono-alphabetic 
substitution cipher is the only possible solution,” relying on their own vast 
experience as practicing cryptanalysts and on theoretical calculations (which 
were some of the first fruits of the then-new information theory) of C. E. 
Shannon, “Communications Theory of Secrecy Systems,” Bell System Tech¬ 
nical Journal , 28 (1949), pp. 657-715 and “Prediction and Entropy of Printed 
English,” Bell System Technical Journal , 30 (1951), pp. 50-64. The longer 
the cryptogram the easier it is to solve, and the more certain we can be that 
the solution is the only one possible. Latin, according to a crude calcula¬ 
tion of mine based on the text of the Vulgate Bible and on the corpus of 
all the Sherlock Holmes stories, has a slightly lower entropy than English 
does. Hence substitution ciphers of this type are somewhat easier to solve in 
Latin than in English. By increasing Friedmans’ 25 letter to 30 letters and 
by replacing English by Latin I make the cryptanalysis task easier and the 
uniqueness claim for the solution more certain. 

29. The sentence Gaza frequens Tibycos duxit Karthago triumphos , I realized 
later, uses every letter of the Latin alphabet, and so is an equivalent to our 
The quick brown fox jumps over the lazy dog. As such it is a convenient plain 
text to use for illustrative purposes, as e.g., Selenus does in Cryptomenytices , 
p. 249. 

30. Arnold, Johannes Trithemius , p. 185, cites Martinus Delrio, Disqui- 
■sitionem magicarum libri sex , (Louvain, 1599), citing p. Ill of the 1679 
Cologne edition: “Steganographiae, periculi et superstitionis plenissimae 
..., quod nondum prohibitis ab Ecclesia libris sit insertum,” and Heinrich 
Reusch, Der Index der verbotenen Bucher, ein Beitrag zur Kirchen- und Tit- 
eraturgeschichte, 2 vols., (Bonn: Verlag von Max Cohen, 1885), II, p. 183, 
paraphrases Antonius Possevinus, Apparatus sacer, 3 vols., (Venice, 1603- 
1606), I, p. 945 as holding that “est sei nicht eine clavis polygraphiae, son- 
dern superstitionis et periculi plenissimum magiamque sapit, non naturalem 
illam, quo tamen nomine plerique suas sordes tegunt, verum etiam ipsam, 
quae cum a S. Rom. Ecclesia prohibita sit una cum ejusmodo libris in Rom. 
Indice, haud dubium quin et istud sit abelegandum.” 
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